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THE CLAIMS AS HEREIN AMENDED 

1. (canceled) 

2, (currently amended) A method according to claim 4 20 wherein step B 
includes recording a PIN number as herein defined as part of the credit card 
information , and further wherein said PIN is included in said encrypted credit 
card information. 

3, (canceled) 

4. (currently amended) A method of conducting electronic credit card 
transactions so as to guard against fraud, comprising the following steps: 

using an internet browser a user of a credit card issued by a credit 
card issuer i fsef initiates a proposed credit card transaction with a third party 
vendor by accessing via said third party vendor a party authorized by said 
credit card issuer to validate credit card transactions and validat i ng 
i nst i tution v i a a th i rd party vendor us i ng an i nt e rn e t brows e r and transmitting 
to said party that va li dating i nst i tut i on credit card information identifying said 
user and an encrypted date/time stamp representing the current transaction 
time obta i n e d from a non - adjustab le tim e sourc e; 

said va li dat i ng i nst i tut i on authorized party receives said encrypted 
date/time stamp and said other credit card information and decrypts said 
encrypted stamp to derive the current transaction time as represented by 
said decrypted date/time stamp; 

said validating i nst i tut i on authorized party (1 ) compares said credit 
card information with previously recorded user information to verify that the 
user initiating the proposed transaction is an authorized user and (2) also 
compares the current transaction time represented by said decrypted 
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date/time stamp with the time of its receipt of said encrypted date time stamp 
and determines if the difference, If any, between said times is within a 
predetermined time limit; and 

depending on the determination made in the foregoing step, the 
va li dat i ng i nst i tut i on authorized party communicates to said third party 
vendor either a validation or rejection of tho transaction to the user in i t i at i ng 
the proposed transaction. 

5. (currently amended) A method according to claim 4 wherein said user 
also transmits an encrypted PIN as herein defined to said val i dating 
inst i tut i on authorized party via said third party vendor , and as part of its 
validation process said va li dat i ng i nstitut i on authorized party decrypts said 
PIN as part of i ts va li dat i on proc e ss and compares said decrypted PIN with 
user information previously recorded by said party to determine the validity of 
said decrypted PIN, and further wherein said authorized party reiects the 
proposed transaction if said decrypted PIN is not valid , 

6. (currently amended) A method of providing security to an electronic 
credit card system wherein i nit i ation of a credit card transaction involving a 
credit card user and a third party vendor requires th e cr e dit card us e r to 
transmit specific user- identifying information about the credit card user to be 
transmitted to a transactionivalidating inst i tut i on party via said third party 
vendor , comprising the step of including an encrypted date/time stamp as 
part of the credit card transaction information that is transmitted to the 
transaction-validating i nst i tution party via said third party vendor , said 
date/time stamp being derived from a non-adjustable time source and 
indicating the current time of the proposed transaction, said encrypted 
date/time stamp being encrypted according to an encryption scheme 
specified by said transaction-validating inst i tution party . 
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7. (currently amended) A method according to claim 6 wherein said 
transaction information includes a credit card account number and a PIN_as 
herein defined, and at least said credit card account number or said PIN is 
encrypted . 

8. (canceled) 

9. (canceled) 

10. (canceled) 

1 1 . (currently amended) A method for authorizing an electronic business 
transaction by an authorized user, comprising the steps of: 

(a) storing information about authorized users, including pre-set 
unique idont i f i cat i on codes public key numbers and private kev numbers f or 
each authorized user, In a validating system, and providing said i dont i ficat i on 
codos public and private kev numbers t o said authorized users for use in 
initiating and completing electronic transactions; 

(b) receiving in the validating system for verification an encrypted 
i dont i ficat i on code which is transmitted in connection with a proposed 
electronic business transaction at the request of a person who may or may 
not be an authorized user, said i dent i f i cation code b e ing transmitt e d and 
roco i v e d togeth e r w i th a comprising an encrypted date/time stamp 
representing the time that the proposed electronic business transaction was 
initiated by said person , a public key number and a private key number : 

(c) decn/pting said received encn/pted code to retrieve said 
date/time stamp, said public key number and said private kev number: 

(g) (d) comparing said transm i ttod and roco i vod i dont i f i cat i on cod e 
decrypted public and private kev numbers with the pre-set unique 
i dont i f i cat i on codos public and private key numbers stored in said validating 
system to verify that it-Is- they are valid, and rejecting the proposed 
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transaction if sa i d transm i tt e d and r e c ei v e d id e nt i ficat i on cod e is not val i d 
said decrypted public and private key numbers are not valid : and 

{d)7 (d) if said transm i tt e d and roco i vod idontif i cat i on codo i s 
decrypted public and private key numbers are verified as valid, (a) (1) 
comparing the time represented by said decrypted date/time stamp with the 
time of receipt of said transmitted ident i f i cat i on encrypted code and 
dato/t i mo stamp by said validating system, and (fe) (2) rejecting the proposed 
transaction if there is a difference between the time represented by said 
decrypted date/time stamp and said time of receipt, and that difference 
exceeds a predetermined limit. 

12. (currently amended) The method of claim 1 1 wherein said electronic 
transactions transaction is a credit card transaction, and e ach of sa i d uniqu e 
i d e nt i fication cod e s i nc l ud e a un i qu e said public key number is a credit card 
account designation. 

13. (currently amended) The method of claim 1 1 wherein said encrypted 
i d e nt i ficat i on code received by said validating system is transmitted to said 
validating system via a third party vendor, and further wherein rejection or 
authorization of said proposed transaction is communicated by said 
validating system to said vendor. 

14. (canceled) 

15. (canceled) 

16. (currently amended) The method of claim +5 H wherein said 
encrypted transm i tt e d and r e ce i v e d id e nt i f i cat i on code includes a an 
encrypted PIN. 
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18. (currently amended) The method of claim 1 1 wherein said encrypted 
transm i tted and roco i vod i dontification code includes a an encrypted PKN. 

19. (canceled) 

20. (new) A method of limiting the amount of time information pertaining 
to a credit card issued by a credit card issuer is valid for use in support of an 
electronic transaction with a vendor comprising the following steps: 

A. a credit card user records credit card information required by 
the vendor via an internet browser, including credit card number, credit card 
expiration date, and the name of the credit card user; 

B. a computer program provided by the credit card issuer or a 
party acting on behalf of said credit card issuer generates a date/time stamp 
representing the current date and time and encrypts said date/time stamp 
and at least some of said recorded credit card information; 

C. said encrypted date/time stamp and said encrypted credit card 
information are transmitted from said credit card user via said vendor to a 
party authorized by the credit card issuer to validate proposed credit card 
transactions; 

D. said party authorized by said credit card issuer to validate 
proposed credit card transactions conducts a validation process that 
comprises: (1) decrypting said encrypted date/time stamp and said encrypted 
credit card information, (2) determining if the age of the proposed transaction 
as represented by the time of the decrypted stamp is within a predetermined 
time limit required for validating the transaction, (3) comparing said decrypted 
credit card information with previously recorded credit card user information 
to verify that the party initiating the proposed credit card transaction is an 
authorized credit card user, and (4) depending on the determinations made 
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in foregoing steps (D)(2) and (D)(3), communicating either a validation or 
rejection of the proposed transaction to the third party vendor and/or the 
party who initiated the proposed credit card transaction. 

21. (new) A method according to claim 20 wherein the date/time stamp is 
embedded in said credit card information. 

22. (new) A method according to claim 20 wherein step B includes 
encryption of said credit card number. 

23. (new) A method for conducting credit card transactions so as to guard 
against fraud, said method comprising steps as follows: 

(a) a credit card user who proposes to carry out a credit card 
transaction with a third party vendor initiates the transaction by accessing a 
computer program supplied by the credit card issuer or a party acting on 
behalf of said credit card issuer that is constructed so as to (1 ) obtain a 
date/time stamp from a time source and (2) encrypt said date/time stamp and 
certain required credit card information identifying a credit card user; 

(b) said credit card user supplies said certain required credit card 
information to said computer program and said computer program (a) obtains 
a date/time stamp in response to said certain credit card information and (b) 
generates an encrypted personal identification code comprising said 
date/time stamp and said certain required credit card information in 
encrypted form; 

(c) said encrypted personal identification code is transmitted via 
said third party vendor to a validating system authorized to validate credit 
card transactions on behalf of said credit card issuer; 

(d) said validating system decrypts said encrypted personal 
identification code to derive the current transaction time as represented by 
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the decrypted date/time stamp and said certain required credit card 
information in decrypted form; 

(e) said validating system (1 ) compares said decrypted certain 
required credit card information witli previously recorded user information to 
verify that the user initiating the proposed transaction is an authorized credit 
card user and (2) also compares the current transaction time represented by 
said decrypted date/time stamp with the time of its receipt and determines if 
the difference, If any, between said times is within a predetermined time limit; 
and 

(f) depending on the determinations made in foregoing steps 
(e)(1 ) and (e)(2), the validating system communicates either a validation or 
rejection of the proposed transaction to the third party vendor and/or the 
party who initiated the proposed credit card transaction. 

24. (new) A method according to claim 23 wherein said certain required 
information includes a credit card number and/or a private key number. 

25. (new) A method according to claim 23 wherein said computer 
program is installed on the credit card user's computer containing a browser, 
and step (c) is conducted via the internet using said browser. 

26. (new) A method according to claim 23 wherein said computer 
program is installed on a remote server and is accessed by said credit card 
user. 

27. (new) A method for conducting electronic transactions so as to guard 
against fraud, said method comprising steps as follows: 

(a) an entity who wishes to carry out an electronic transaction with 
a bank initiates the transaction by accessing a computer program supplied by 
said bank that is constmcted so as to (1) obtain and encrypt a date/time 
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stamp in response to certain required information about tlie entity proposing 
to carry out tfie electronic transaction, and (2) encrypting said date/time 
stamp and said certain required infomriation, said certain required information 
including an account number and a personal identification number 
representing said entity; 

(b) said entity supplies said certain required information to said 
computer program and in response said computer program generates a 
date/time stamp and encrypts said date/time stamp and said certain required 
information; 

(c) said encrypted date/time stamp and said encrypted certain 
required information are transmitted to and received by said banl< or a 
validating party representing said bank; 

(d) said receiving bank or validating party decrypts said received 
encrypted date/time stamp and said received encrypted certain required 
information; 

(e) said receiving bank or validating party (1 ) compares said 
decrypted certain required information with previously recorded information 
to verify that the entity initiating the proposed transaction is an authorized 
entity and (2) also compares the transaction time represented by said 
decrypted date/time stamp with the time of its receipt by said bank or 
validating party to determine if the difference, if any, between said times is 
within a predetermined time limit; and 

(f) depending on the determination made in steps (e)(1 ) and 
(e)(2), said bank or validating party communicates either a validation or 
rejection of the proposed transaction to the entity who initiated the proposed 
credit card transaction. 

28. (new) A method according to claim 27 wherein in step (c) said 
encrypted date/time stamp and encrypted certain required information are 
transmitted to and received by said validating party, the steps in (e) are 
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carried out by the validating party, and in step (f) the validating party 
communicates said validation or rejection of the proposed transaction to said 
bank. 
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